From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from out162-62-58-216.mail.qq.com (out162-62-58-216.mail.qq.com [162.62.58.216]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 1802413D886 for ; Thu, 20 Aug 2026 01:24:57 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=162.62.58.216 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1787189101; cv=none; b=GSoEaP5gCW/+Z9CsASIPEhmwFG2ypi1m/vxX9WNU8NPiJW12NzCMc9WM0KWQh1ASuca4leKWJfE36flIuGHUW0Wxu12Xoms53PhyC4Xb+mKd8AwvIlEVn++k9LIZXUn6kyWLd6vHTOa0FNNRhwA8IOWyfvWDJVsrkOtizeguFWU= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1787189101; c=relaxed/simple; bh=Qg4y2gLt3vkWr60xQslOSOEmAVZvJf9SFofWy7ahg38=; h=Message-ID:From:To:Cc:Subject:Date:In-Reply-To:References: MIME-Version; b=OJY9LPxSRxCzK2kayLXBwpNwdCx28wmSL9yr1bbmn079u9wo2QfTpsZmVtjl62Lmnao0iXVIW8NlziYlt9izj9gOnnFlLxyUHHgjqOT7ZIJa93M/LIQGlyeUhyh6zg5jzRSeSdR3aO24Fg3lZg4YLYKU+F8lgYi//yEtTXVmGuE= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=qq.com; spf=pass smtp.mailfrom=qq.com; dkim=pass (1024-bit key) header.d=qq.com header.i=@qq.com header.b=SfqqISNw; arc=none smtp.client-ip=162.62.58.216 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=qq.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=qq.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=qq.com header.i=@qq.com header.b="SfqqISNw" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qq.com; s=s201512; t=1787189087; bh=l6MngzZoWpXTgg1xhBSYaSKmnlnSEZ1mtTxbaZLEBQ0=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=SfqqISNwy7FaawFITeJYeSu8LgoBmwWFrJlDIoN857Q9D6q+xFCL6mcM0wwKD8b3+ TfMWkfmcb4ZnFySlCOdJt7JP6Osl3xPIYRp4SzqIerUk++yrhLIoUOQMl6aQvs4aa6 TWGNHkYRsUTzSo8ckPUjIfkmMfJcIYXDqK8IV88E= Received: from lxu-ped-host.. ([111.198.231.89]) by newxmesmtplogicsvrsza73-0.qq.com (NewEsmtp) with SMTP id 62C968D4; Thu, 20 Aug 2026 09:24:44 +0800 X-QQ-mid: xmsmtpt1787189084tdjn9zguz Message-ID: X-QQ-XMAILINFO: OW+Aa38L0qVBE7Hv13m4r0zrB4CilPx1VND4qJCbLF2bBy882FYsx6P6ZqCpFa WZanrnsMu4ltTC23EGGTcubVBFTqVR2zK/+/wVIt86QlzcRX0gZPgK0gaVmRIGb59BGrsJWjVCd0 +dtDVkxaHRd/DWWLtJvY0GSbmx11F8Ib03hVFZkHn7N4dBE5OOLlJXOviCYVD57rSF6nkqIyQ/eI 4f7kRDj4Yt8SNHr2Pko0+IfVNhxIXvzjUlXgnB2yheHAVvaEmH4PYXaPpIE5gTSh6ETVkQw8gkSC w16tpwNKmLvGYGrFng7TUoZPRyTdN9egZyatsbDIHuqPG0eWLZpQ2UUl/xRAnvlDGqEMFb1sU5iI IU7PvgoId940LBL2xIfxV2PgWau1AUgSGX+d/4RFOaxbAi4oYQumft4GssO43V7lUq37s1Fn5LVg RdijRY/a2y2kpmGScWeyPeZDcze2WyxA0SXTgaaix7jkOA+cFrVvZe5bsTB5ki4N4IErqCPCZUaP vvHecAjZfQEwiLSN3lqYlJeMYD61HaS9Pybm/d2hJW4i5JwyrgWbFwPvn7w2YqNXNTLbEvXdJx8z AZeV9NJ4J7G39+MsAeE0KPYU8sf4HoSKT/I669ijNYv+z3w3L5vQAxlGL6JY/qzq1ZzBFPcaaufn 0+SuXcoIcF73tTlIjCdXavfEMVwPb3CCmdj+2pDJelaCm0NuCWPSyb+cHdF4rQZioQKuUaKtUmPj K0Sl32mw5Z0Js/h61ag0Kt6qP/FKIKBPTOTLOjjRwBeKNezoX2jEiq9KUsgd5bqJoFn/OS6G5LQ2 yuohOpW4WvL3cuH/bL0oHptCIc/eHhVvI51pE5nYQOb+Gy9ow6JKAeMTMN2S7nC7pp9Cu9JRwGxq NIpyQwju2K5V/N0OBkCuWL/7fDLLS9spOKkkAB8aVR04Wp27mSf8bnfop7JQpfuA8dgTg5mbqfLD jEM6WzcNY5qBa1XMpUPp2In3wLP2l7UZGee66SuT5Ods6Q132u1diwf0sYBcX7zsLqRnfT2QtQ9e 7tRevjsw== X-QQ-XMRINFO: MSVp+SPm3vtSI1QTLgDHQqIV1w2oNKDqfg== From: Edward Adam Davis To: syzbot+9d20c3ad7d29227de28d@syzkaller.appspotmail.com Cc: linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Subject: Re: [syzbot] [mm?] [gfs2?] WARNING in read_rindex_entry Date: Thu, 20 Aug 2026 09:24:45 +0800 X-OQ-MSGID: <20260820012444.505888-2-eadavis@qq.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <6a863306.ae6ddae5.3da009.0013.GAE@google.com> References: <6a863306.ae6ddae5.3da009.0013.GAE@google.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit #syz test diff --git a/fs/gfs2/rgrp.c b/fs/gfs2/rgrp.c index 5988a165a830..945657bf5006 100644 --- a/fs/gfs2/rgrp.c +++ b/fs/gfs2/rgrp.c @@ -899,6 +899,7 @@ static int read_rindex_entry(struct gfs2_inode *ip) struct gfs2_rindex buf; int error; struct gfs2_rgrpd *rgd; + size_t size; if (pos >= i_size_read(&ip->i_inode)) return 1; @@ -917,6 +918,13 @@ static int read_rindex_entry(struct gfs2_inode *ip) rgd->rd_sbd = sdp; rgd->rd_addr = be64_to_cpu(buf.ri_addr); rgd->rd_length = be32_to_cpu(buf.ri_length); + + size = rgd->rd_length * sizeof(struct gfs2_bitmap); + if (get_order(size) > MAX_PAGE_ORDER) { + error = -EFBIG; + goto fail; + } + rgd->rd_data0 = be64_to_cpu(buf.ri_data0); rgd->rd_data = be32_to_cpu(buf.ri_data); rgd->rd_bitbytes = be32_to_cpu(buf.ri_bitbytes);